Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » PCI DSS » Cardholder Data

Cardholder Data

Cardholder data (CD) consists of all personally identifiable information (PII), such as the cardholder’s name, card number, expiration date, and CVV security code of the individual with a credit or debit card. This is sensitive card information subject to security regulations like PCI DSS. Banks, payment merchants, and other entities that store and process this data must have adequate security measures to protect the cardholder’s data from security threats. Failure to protect cardholder data can land you in legal problems, and there are financial penalties as well.

Additional reading

How much does a SOC 2 Audit Cost in 2026?

TL;DR SOC 2 audit costs usually range from about $5,000 to $50,000, with Type 1 audits generally starting lower and Type 2 audits costing more because they test controls over time, not just at a single point. Your final cost depends on scope: employee count, number of products, complexity of systems, chosen Trust Services Criteria,…

Who Does GDPR Apply To? Understanding GDPR’s Scope

TL,DR: GDPR applies to any organization collecting personal data of EU citizens, binding all 27 EU member states plus Iceland, Norway, and Liechtenstein. It extends to non-EU organizations under Article 3 offering services to or monitoring EU residents Organizations must appoint a DPO if they are a public authority, conduct large-scale systematic monitoring, or process…

What is NIST CSF 2.0: Everything You Need to Know

TL,DR: NIST CSF 2.0 was published February 26, 2024, expanding scope from critical infrastructure to all industries and adding a 6th core function called “Govern” alongside Identify, Protect, Detect, Respond, and Recover By 2020, 50% of U.S. organizations had adopted CSF 1.0 across all industries, prompting NIST to broaden applicability. CSF 2.0 enhances guidance on…

Sprinto: Your growth superpower

Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.

Contact sales